CVE-2026-14009

creationtimestamp| type| source ---|---|--- 2026-07-01 21:14:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgqjtg2s2y 2026-07-01 21:14:32+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmgqrs4fd2f 2026-07-02 07:49:11+00:00| seen|...

CVE-2026-13947

creationtimestamp| type| source ---|---|--- 2026-07-01 21:11:12+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmgksqeql2f 2026-07-01 21:11:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgkvqibp2o 2026-07-02 07:46:55+00:00| seen|...

CVE-2026-13871

creationtimestamp| type| source ---|---|--- 2026-07-01 20:43:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmezataqo2t 2026-07-01 20:43:33+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpmezf42co2u 2026-07-02 07:21:43+00:00| seen|...

CVE-2026-58593

NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor. The inbound middleware verifies the HTTP-signature actor and checks the origin of object.id, but never validates that attributedTo corresponds to the sender. In the object mock, attributedT...

CVE-2026-5120

creationtimestamp| type| source ---|---|--- 2026-07-01 13:21:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplmcjxqz725 2026-07-01 14:04:30+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mplopss7si2t 2026-07-01 15:24:37+00:00| seen|...

CVE-2026-13454

creationtimestamp| type| source ---|---|--- 2026-07-01 10:51:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpldwfzwlj2q 2026-07-01 11:40:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgoh6jhd2h 2026-07-01 12:39:40+00:00| seen|...

CVE-2026-11570

creationtimestamp| type| source ---|---|--- 2026-07-01 10:20:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplc7rj3hx2u 2026-07-01 11:45:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgx5o7262o...

CVE-2026-11887

creationtimestamp| type| source ---|---|--- 2026-07-01 10:10:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplbnun5qd2k 2026-07-01 11:47:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplh27shlu2h...

CVE-2026-11883

creationtimestamp| type| source ---|---|--- 2026-07-01 09:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplazj4bpa2h 2026-07-01 11:42:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgruhk7f2b 2026-07-01 11:42:31+00:00| seen|...

CVE-2026-11794

creationtimestamp| type| source ---|---|--- 2026-07-01 09:51:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplakrdvmc2d 2026-07-01 11:45:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgxz7v4x23...

CVE-2026-11387

creationtimestamp| type| source ---|---|--- 2026-07-01 09:19:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6rdwfr22q 2026-07-01 10:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116844254575740206 2026-07-01 10:30:36+00:00| seen|...

CVE-2026-12158

creationtimestamp| type| source ---|---|--- 2026-07-01 09:18:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6qiao7w2r 2026-07-01 11:42:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgsm4ipy24 2026-07-01 12:19:51+00:00| seen|...

CVE-2026-10096

creationtimestamp| type| source ---|---|--- 2026-07-01 09:17:36+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6orrwm62u 2026-07-01 09:17:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6or2tpi2l 2026-07-01 11:36:19+00:00| seen|...

CVE-2026-13733

creationtimestamp| type| source ---|---|--- 2026-07-01 09:16:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6mcgcha2o 2026-07-01 09:16:13+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6md3emm2g 2026-07-01 11:16:06+00:00| seen|...

CVE-2026-12435

creationtimestamp| type| source ---|---|--- 2026-07-01 09:14:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6imrlpi2l 2026-07-01 11:46:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgzi53ov2b 2026-07-01 13:07:44+00:00| seen|...

CVE-2026-12408

creationtimestamp| type| source ---|---|--- 2026-07-01 09:13:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6i4ugm52b 2026-07-01 11:39:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgndvkxf2b 2026-07-01 12:30:35+00:00| seen|...

CVE-2026-12408

The Slim SEO – A Fast & Automated SEO Plugin For WordPress plugin for WordPress is vulnerable to Unauthorized Private Content Disclosure in all versions up to, and including, 4.9.8 via the /wp-json/slim-seo/meta-tags/ai REST API endpoint. This is due to the endpoint's permissioncallback performin...

CVE-2026-11570

The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured display template, leading to a Stored Cross-Site Scripting that can be triggered by unauthenticated users when a non-default display option is enabled...

CVE-2026-11570 User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name

The User Submitted Posts WordPress plugin before 20260608 does not escape a submitted value before outputting it in an admin-configured display template, leading to a Stored Cross-Site Scripting that can be triggered by unauthenticated users when a non-default display option is enabled...

CVE-2026-11570

CVE-2026-11570 affects the User Submitted Posts WordPress plugin prior to 20260608, where an input value is not escaped before being output in an admin-configured display template, allowing unauthenticated users to trigger a Stored XSS when a non-default display option is enabled. The issue is de...